Merge pull request #2 from fdonnet/onboarding

    Add endpoints for register and onboard
    Create a free subscription and a base tenant and attach the user to it
    Sveletkit simple example
    Various correction and upgrade
    Naming
    Other stuff

Author: fdonnet

README.md

@@ -14,6 +14,10 @@ SvelteKit Frontend added. (not working in Aspire with fnm), so:
 
 `npm install, npm run dev in svelte-link-ui folder`
 
+After all the Aspire things are mounted.
+
+Simple onboarding endpoints + Svelle exmple. Now you can register new users and test. (Very simple and naive, but you have an example you can build on.)
+
 ## Goal
 
 This project allows you to choose any OAuth provider and remain independent in terms of your security design. You can add any frontend (Blazor, Next.js, SvelteKit) or backend APIs in front or behind this security layer. For a full SPA, you can modify Yarp to be a full BFF (Backend for Frontend).
@@ -67,5 +71,5 @@ For your backend APIs, in the EF Core pooled DbContext factory, the user is inje
 
 ## How You Can Help
 
-If you find this project useful, you can help by reviewing the implementation or contributing to make it more generic (user onboarding from oauth provider via webhook or other stuff). It's a side project on a boring and not "sexy" topic for me, but I hope it can be helpful to some of you. This project aims to avoid fully managed pricey solutions because, in the end, we only need simple OAuth authentication and to manage our authorization layer by ourselves. Help on that will be appreciated.
+If you find this project useful, you can help by reviewing the implementation or contributing to make it more generic ~~(user onboarding from oauth provider via webhook or other stuff)~~ => simple onboarding implmented. It's a side project on a boring and not "sexy" topic for me, but I hope it can be helpful to some of you. This project aims to avoid fully managed pricey solutions because, in the end, we only need simple OAuth authentication and to manage our authorization layer by ourselves. Help on that will be appreciated.
 

UbikLink.AppHost/Program.cs

@@ -18,6 +18,7 @@
 var transportType = builder.AddParameter("transport-type", secret: false);
 var authTokenStoreKey = builder.AddParameter("auth-token-store-key", secret: true);
 var authRegisterAuthorizationKey = builder.AddParameter("auth-register-authorization-key", secret: true);
+var emailActivationEnable = builder.AddParameter("email-activation-enable", secret: false);
 
 //Postgres (local)
 var db = builder.AddPostgres("ubiklink-postgres", postgresUsername, postgresPassword)
@@ -55,6 +56,7 @@
     .WithEnvironment("Messaging__RabbitUser", rabbitUser)
     .WithEnvironment("Messaging__RabbitPassword", rabbitPassword)
     .WithEnvironment("AuthRegister__Key", authRegisterAuthorizationKey)
+    .WithEnvironment("AuthRegister__EmailActivationActivated", emailActivationEnable)
     .WithReference(securityDB)
     .WaitFor(securityDB)
     .WithReference(rabbitmq)

UbikLink.AppHost/appsettings.json

@@ -33,5 +33,6 @@
   "ConnectionStrings:messaging": "xx",
   "Parameters:keycloak-password": "admin",
   "Parameters:auth-token-store-key": "Ye6Y36ocA4SaGqYzd0HgmqMhVaM2jlkE",
-  "Parameters:auth-register-authorization-key": "Ye6Y36oddddcA4SaGqYzd0HgmqMhVaM2jlkE"
+  "Parameters:auth-register-authorization-key": "Ye6Y36oddddcA4SaGqYzd0HgmqMhVaM2jlkE",
+  "Parameters:email-activation-enable": "false"
 }

UbikLink.Common/Api/AuthRegisterAuthKey.cs

@@ -6,9 +6,11 @@
 
 namespace UbikLink.Common.Api
 {
+    //TODO: don't forget to activate the email activation
     public class AuthRegisterAuthKey
     {
         public const string Position = "AuthRegister";
         public string Key { get; set; } = string.Empty;
+        public bool EmailActivationActivated { get; set; } = false;
     }
 }

UbikLink.Common/UbikLink.Common.csproj

@@ -21,7 +21,7 @@
     <PackageReference Include="Microsoft.AspNetCore.OpenApi" Version="9.0.2" />
     <PackageReference Include="Microsoft.EntityFrameworkCore" Version="9.0.2" />
     <PackageReference Include="System.IdentityModel.Tokens.Jwt" Version="8.6.0" />
-    <PackageReference Include="Yarp.ReverseProxy" Version="2.2.0" />
+    <PackageReference Include="Yarp.ReverseProxy" Version="2.3.0" />
   </ItemGroup>
 
   <ItemGroup>

UbikLink.Proxy/Authorizations/UserTenantRolesOrAuthorizationsRequirement.cs

@@ -46,7 +46,7 @@ protected override async Task HandleRequirementAsync(AuthorizationHandlerContext
             }
 
              //TODO: check that
-            if (requirement.IsSubscriptionOwnerAllowed && userInfo.IsSubOwnerOfTheSelectetdTenant)
+            if (requirement.IsSubscriptionOwnerAllowed && userInfo.IsSubOwnerOfTheSelectedTenant)
             {
                 context.Succeed(requirement);
                 return;

UbikLink.Proxy/UbikLink.Proxy.csproj

@@ -14,7 +14,7 @@
     <PackageReference Include="Microsoft.AspNetCore.OpenApi" Version="9.0.2" />
     <PackageReference Include="Microsoft.Extensions.Caching.Hybrid" Version="9.2.0-preview.1.25105.6" />
     <PackageReference Include="Microsoft.Extensions.ServiceDiscovery.Yarp" Version="9.1.0" />
-    <PackageReference Include="Yarp.ReverseProxy" Version="2.2.0" />
+    <PackageReference Include="Yarp.ReverseProxy" Version="2.3.0" />
   </ItemGroup>
 
   <ItemGroup>

UbikLink.Security.Api/Data/Config/UserConfiguration.cs

@@ -21,6 +21,9 @@ public void Configure(EntityTypeBuilder<UserModel> builder)
                 .IsRequired()
                 .HasMaxLength(200);
 
+            builder.Property(a => a.ActivationCode)
+                .HasMaxLength(50);
+
             builder.Property(a => a.Version)
                 .IsConcurrencyToken();
 

UbikLink.Security.Api/Data/Init/MandatoryData.cs

@@ -23,6 +23,8 @@ internal static async Task LoadAsync(SecurityDbContext ctx)
                     Lastname = "9000",
                     IsMegaAdmin = false,
                     Version = SystemUserId,
+                    IsEmailVerified = false,
+                    ActivationCode = "000000",
                     AuditInfo = new(audit.CreatedAt, audit.CreatedBy, audit.ModifiedAt, audit.ModifiedBy)
                 };
 

UbikLink.Security.Api/Data/Init/TestData.cs

@@ -280,6 +280,7 @@ internal static async Task LoadAsync(SecurityDbContext ctx)
                             Lastname = "Admin",
                             IsMegaAdmin = true,
                             Version = AdminUserId,
+                            IsEmailVerified = true,
                             AuditInfo = new(audit.CreatedAt, audit.CreatedBy, audit.ModifiedAt, audit.ModifiedBy)
                         },
                         new()
@@ -292,6 +293,7 @@ internal static async Task LoadAsync(SecurityDbContext ctx)
                             IsMegaAdmin = false,
                             SelectedTenantId = null,
                             Version = UserId2,
+                            IsEmailVerified = true,
                             AuditInfo = new(audit.CreatedAt, audit.CreatedBy, audit.ModifiedAt, audit.ModifiedBy)
                         },
                         new()
@@ -304,6 +306,7 @@ internal static async Task LoadAsync(SecurityDbContext ctx)
                             IsMegaAdmin = false,
                             SelectedTenantId = null,
                             Version = UserId1,
+                            IsEmailVerified = true,
                             AuditInfo = new(audit.CreatedAt, audit.CreatedBy, audit.ModifiedAt, audit.ModifiedBy)
                         },
                         new()
@@ -316,6 +319,7 @@ internal static async Task LoadAsync(SecurityDbContext ctx)
                             IsMegaAdmin = false,
                             SelectedTenantId = null,
                             Version = UserId3,
+                            IsEmailVerified = true,
                             AuditInfo = new(audit.CreatedAt, audit.CreatedBy, audit.ModifiedAt, audit.ModifiedBy)
                         },
                         new() //Not really used anymore because the user is not active at the top lvl (managed by you oauth provider, but inactivity is managed at subscription lvl)
@@ -328,6 +332,7 @@ internal static async Task LoadAsync(SecurityDbContext ctx)
                             IsMegaAdmin = false,
                             SelectedTenantId = null,
                             Version = UserIdInactivated,
+                            IsEmailVerified = true,
                             AuditInfo = new(audit.CreatedAt, audit.CreatedBy, audit.ModifiedAt, audit.ModifiedBy)
                         },
                 };